IN THE SPECIFICATION 

Please amend the specification as follows: 

Please replace the paragraph beginning at page 1, line 10, with the following 
rewritten paragraph as follows: 

Recently, an information system using the Internet technology has been 
widely utilized as infrastructures for business activities, resulting in a mor e 
substantial increase in importance of a security system for avoiding threats to 
information assets by illegal access to the information system and virus. -- 

Page 1, line 23, delete "SUMMARY OF THE INVENTION". 

Page 3, line 1, insert --SUMMARY OF THE INVENTION-. 

Please replace the paragraph beginning at page 12, line 7, with the following 
rewritten paragraph: 

The CPU 1 1 executes the OS program 150 loaded on the memory 12 to 
materialize an OS 151 on the electronic computer. Furthermore, the CPU 1 1 
executes the application program 137 loaded on the memory 12, to materialize an 
application module 138 for offering each service of the server, the router and the 
firewall on the electronic computer. The CPU 11 executes a management program 
included in the security management and audit program group 136 loaded on the 
memory 12, to materialize a security management module 139 for establishing and 
changing a status of a security measure of the OS 151 and application module 138 
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on the electronic computer. The CPU 1 1 executes an audit program included in the 
security management and audit program group 136, to materialize a security audit 
module 140 for confirming the status of the security measure of the OS 4^4- 150 and 
the application module 138 on the electronic computer. Moreover, although not 
shown, a communication control module and the like for communicating with other 
devices through the network 33 are also constructed on the electronic computer. -- 

Please replace the paragraph beginning at page 13, line 8, with the following 
rewritten paragraph: 

In Fig. 4, with respect to each line, column 41 describes an identifier System 
Identifier ( SYSID) for uniquely identifying a system that is an object of an information 
security policy management and audit. A column 44 describes a software name for 
constructing a system represented by the SYSID of the column 41 . The software 
name includes names of the OS program 150 and application program 137. A 
column 43 describes a category of the software such as OS, web, mail, database, 
etcl. A column 42 describes categories of apparatuses in which the system 
represented by the SYSID of the column 41 operates. The apparatuses include the 
router, the server, the client, the firewall, and the like. And, a column 45 stores a 
selection result by an operator of the system represented by the SYSID of the 
column 41 is stored. - 
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Please replace the paragraph beginning at page 14, line 17, with the following 
rewritten paragraph: 

In Fig. 6, with respect to each line, a column 61 describes an identifier 
POLICYID for uniquely identifying the information security policy. The space of the 
management program of the column 62 describes a name 621 of the management 
program for performing a management of a security measure of the information 
security policy described in the space of the POLICYID of the column 61 , SYSID 622 
of the system managed by the management program of thea name 621 , and a 
correspondence 623 signifying the necessity of an execution of the management 
program of the name 621 . The space of tfrean audit program of the column 63 
describes a name 631 of the audit program performing an audit for the security 
measure of the information security policy described in the space of POLICYID of the 
column 61, SYSID 632 of the system audited by the audit program of the name 631, 
and a correspondence 633 signifying the necessity of an execution of the audit 
program of the name 631. 
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